naver

Latest CVEs · RSS

• CVE-2026-8148 2026-05-08
  NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improp
• CVE-2026-1513 2026-01-28
  billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
• CVE-2026-23769 2026-01-16
  lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset r
• CVE-2026-23768 2026-01-16
  lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityL
• CVE-2025-69235 2025-12-30
  Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
• CVE-2025-69234 2025-12-30
  Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
• CVE-2025-62585 2025-10-16
  Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
• CVE-2025-62584 2025-10-16
  Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
• CVE-2025-62583 2025-10-16
  Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.
• CVE-2025-58323 2025-08-29
  NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to impr
• CVE-2025-58322 2025-08-28
  NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improp
• CVE-2025-53600 2025-07-04
  Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab environment.
• CVE-2025-53599 2025-07-04
  Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the browser via a crafted javascript scheme.
• CVE-2025-49223 2025-06-04
  billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or c
• CVE-2024-50583 2024-10-25
  Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings.
• CVE-2024-40618 2024-07-11
  Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension.
• CVE-2024-28216 2024-03-07
  nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclo
• CVE-2024-28215 2024-03-07
  nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclo
• CVE-2024-28214 2024-03-07
  nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
• CVE-2024-28213 2024-03-07
  nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsaf
• CVE-2024-28212 2024-03-07
  nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
• CVE-2024-28211 2024-03-07
  nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote
• CVE-2023-25632 2023-11-27
  The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature.
• CVE-2020-9754 2022-06-27
  NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.
• CVE-2022-24077 2022-06-13
  Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection.